Quick answer: No new CoinDCX hack has been confirmed. On Oct. 22, 2026, CoinDCX said 15.99 million USDT moved on Oct. 21 came from addresses compromised in July 2025, and user funds are safe. ZachXBT disputes that, saying one deposit address kept sweeping deposits to the current hot wallet until May 2026, leaving $15.8 million unaccounted for.
Fresh CoinDCX hack claims are pitting one of India’s largest crypto exchanges against the best-known on-chain sleuth in the industry. CoinDCX says no wallet was breached. ZachXBT says its own records show about $15.8 million in user deposits slipped through the cracks.
The dispute started late on Oct. 21, 2026. Yet by midday on Oct. 22, neither side had fully explained the transaction history behind the move, so users are left asking one simple question: are funds on CoinDCX safe?
What happened in the CoinDCX hack claims?
At 15:35 UTC on Oct. 21 (23:35 in UTC+8), CoinDCX hot wallets and several deposit addresses sent about 15.99 million USDT and 5,783.81 TRX to a single TRON address, on-chain researcher Darcy reported on X. The largest single transfer was 15,819,002 USDT.
The receiving address then split the funds and pushed them, through several hops, toward deposit addresses at Binance, OKX and Gate, Darcy said. Wu Blockchain relayed the findings as a suspected $16 million hack, but added that nobody had confirmed it.
What does CoinDCX say about the transfers?
CoinDCX posted an official statement at 08:14 UTC on Oct. 22. It called the claims misleading. According to the exchange, it created the addresses in January 2025, attackers compromised them in July 2025, and CoinDCX has not used them since. As a result, trading continues as usual.
Co-founder and CEO Sumit Gupta went further. “CoinDCX wallets are not breached,” he wrote, calling it a possible false alarm caused by attackers reusing old addresses, crypto.news reported. In addition, he said the team checked current operational and customer addresses, pointed to its proof of reserves and promised more details.
Why does ZachXBT say $15.8 million is unaccounted for?
At 08:52 UTC, ZachXBT replied directly. He said a liquidity provider kept using deposit address TQKJQ for 10 months after the July 2025 incident. On top of that, it swept user deposits and received gas as recently as April and May 2026, sending funds to CoinDCX’s current public hot wallet.
“Meaning $15.8M in user deposits was unaccounted for by your team,” he wrote. PANews and The Crypto Times carried the same claim.
However, as crypto.news pointed out, the screenshots shared so far do not prove who owns every wallet or whether any customer lost money. That gap is the heart of the story. If the address was truly abandoned, the new outflow could be the old attacker cleaning up. On the other hand, if it was still live, CoinDCX’s books may have missed deposits for months.
How does this link to the July 2025 CoinDCX hack?
In July 2025, attackers took about $44 million from an internal CoinDCX liquidity account. The exchange blamed a server compromise, said attackers never touched customer assets in cold storage, and covered the loss from its treasury, according to crypto.news. It later offered a recovery bounty of up to 25% of recovered funds, capped at $11 million.
India’s exchanges carry extra baggage here. For example, WazirX lost about $230 million in 2024, a hack that hit customer balances directly. Meanwhile, ZachXBT named WazirX and BitBNS alongside CoinDCX in his post. For context on how often this happens, see our breakdown of $1.18 billion in Q3 crypto hacks.
What should CoinDCX users do now?
There is no confirmed loss of user funds, and trading is live. Even so, a few steps cut risk while the facts settle:
- Never reuse an old deposit address. Always copy a fresh one from the app before you send. ZachXBT’s claim centres on an old address that kept receiving deposits.
- Check official channels only. CoinDCX asked users to trust only its own accounts, and scammers often ride hack headlines.
- Watch the reserve data. A clear reconciliation of address TQKJQ would settle most of the questions.
Because the funds are mostly USDT on TRON, Tether could in theory freeze them, but so far nobody has reported a freeze. Our USDT vs USDC guide explains how stablecoin freezes work.
Market implications
Overall, the amount is small next to the $1.18 billion stolen in Q3. However, trust is the real asset for an exchange. If ZachXBT’s reading holds, regulators may push harder for audited proof of reserves and liability checks. If CoinDCX’s holds, the episode becomes a lesson in how compromised addresses can echo long after a hack. ZachXBT’s past work, such as his FreedomXMR laundering report, often moves fast once data is public.
CoinDCX Hack FAQ
Was CoinDCX hacked again in October 2026?
Nobody has confirmed a new hack. CoinDCX said on Oct. 22, 2026 that about 15.99 million USDT moved from addresses compromised in its July 2025 hack, not from active wallets, and that user funds are safe.
What is ZachXBT accusing CoinDCX of?
ZachXBT says CoinDCX deposit address TQKJQ kept sweeping user deposits to the exchange’s current hot wallet until April and May 2026, so the team failed to account for about $15.8 million in deposits. CoinDCX has not yet reconciled that history.
Are my funds on CoinDCX safe?
CoinDCX says yes and points to its proof of reserves. As of Oct. 22, 2026, no one had confirmed a customer loss. Therefore, always use a fresh deposit address and follow only official channels.
How much did CoinDCX lose in the 2025 hack?
Attackers took about $44 million from an internal liquidity account in July 2025. CoinDCX then covered it from its treasury and said the hack did not touch customer cold storage, per crypto.news.
Sources
- Darcy on X: Oct. 21 transfer details
- CoinDCX official statement on X
- ZachXBT on X: $15.8M unaccounted deposits
- crypto.news: CoinDCX denies second hack claims
- PANews: ZachXBT on CoinDCX deposits
- The Crypto Times: ZachXBT alleges $15.8M unaccounted
This article is for information only and is not financial advice. Crypto is volatile; always DYOR before acting.
